Permissions Explainer

Last updated: June 26, 2026

Xor is a Manifest V3 extension. Below is each permission it declares and the specific reason it needs it. Xor acts only in response to commands you give it.

storage

Save your settings, session, and preferences on your device.

activeTab / tabs

See and operate the tab you are working in, and open or switch tabs for multi-step tasks you request.

scripting

Show the assistant UI on the page and read/act on page elements to carry out your commands.

debugger

Used by the automation engine to reliably click and type on complex pages (via the Chrome DevTools Protocol) where ordinary click/typing events fail. It is only active while a task you started is running, attached only to that task's tab, and is never used to inspect your network traffic or other extensions.

clipboardRead / clipboardWrite

Copy extracted or OCR text for you, and paste text into a field when you ask Xor to.

identity

Enable optional Google sign-in.

sidePanel

Show live task progress in Chrome's side panel.

notifications

Let you know when a background task finishes or needs your input.

host permissions (all sites)

Xor can work on whatever site you choose to use it on. It only reads or acts on a page when you issue a command there — it does not monitor your browsing in the background.